iPhone vulnerable to hacker attacks - researchers

SECURITY experts have uncovered flaws in Apple's iPhone that hackers can exploit to take control of the popular device, using the tactic for identity theft and other crimes.

Users need to be warned that their iPhones are not entirely secure and Apple should try to repair the vulnerability as soon as possible, they said at the Black Hat conference in Las Vegas, one of the world's top forums for exchanging information on computer security threats.

"It's scary. I don't want people taking over my iPhone," said Charlie Miller, a security analyst with consulting firm Independent Security Evaluators.

How it works

Mr Miller and Collin Mulliner, a PhD student at the Technical University of Berlin, also discovered a method that allows hackers to easily knock a victim's iPhone off a carrier's network.

It prevents users from making calls, accessing the internet and exchanging text messages, they added.

The researchers showed the audience how to break into iPhones by sending computer code via the phone's SMS system. They said that the phone's users cannot detect that it is receiving the malicious code.

They said the information they presented at Black Hat will give criminals enough information to develop software to break into iPhones within about two weeks.

They said they warned Apple of the flaw in the middle of July, but that the company has yet to fix it.

"Apple's credibility and reputation could get hurt if they don't respond. Positive buzz is good; negative buzz is much more harmful," said Trip Chowdhry, an analyst with Global Equities Research.

The dark side

Most of the 4000 Black Hat attendees are security professionals, while others are malicious hackers, or crackers.

When asked why they would hand over such information to criminals, security experts said they felt it was necessary to alert the public that iPhones were just as vulnerable to attack as personal computers.

"If we don't talk about it, somebody is going to do it silently. The bad guys are going to do it no matter what," Mr Mulliner said.

They have successfully tested the hacks on iPhones running on networks of four carriers in Germany along with AT&T in the US. They said they believed the methods will work with iPhone carriers around the world.

The two said they used a similar method to break into phones running on Google's Android operating system. Google patched the flaw after they notified the company of the vulnerability.

Apple officials could not immediately be reached for comment.